Blackberry PRD-10459-003 Administration Guide - Page 58

Turn off support for processing S/MIME-protected messages on the BlackBerry, Enterprise Server

Page 58 highlights

Administration Guide Extending messaging security to a BlackBerry device 3. Click Edit instance. 4. On the Messaging tab, in the Security settings section, perform any of the following actions: • To require that the BlackBerry Enterprise Server encrypts messages using S/MIME encryption for a second time when the BlackBerry Enterprise Server processes S/MIME-protected messages that an S/MIME-enabled application weakly encrypted or only signed, in the Turn on S/MIME encryption on signed and weakly encrypted messages drop-down list, click True. • To permit BlackBerry device users that have email applications that do not support S/MIME to read the text of an S/MIME-protected message, in the Send S/MIME messages in clear-signed format drop-down list, click True. • To require that the BlackBerry Enterprise Server deletes attachment data from any signed-only S/MIMEprotected messages so that the BlackBerry Enterprise Server conserves bandwidth, in the Remove attachment data from signed S/MIME messages drop-down list, click True. • To require that the BlackBerry Enterprise Server sends encrypted S/MIME-protected messages using an updated MIME content-type that is in accordance with PKCS#7 instead of the default legacy MIME contenttype, in the Use PKCS #7 MIME type drop-down list, click True. 5. Click Save all. 6. To make sure that the changes take effect immediately, perform the following actions to restart the BlackBerry Messaging Agent: a. On the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view > BlackBerry Enterprise Server. b. Click the BlackBerry Enterprise Server instance that includes the BlackBerry Messaging Agent. c. Click Restart instance. Related topics Restarting BlackBerry Enterprise Server components, 327 Turn off support for processing S/MIME-protected messages on the BlackBerry Enterprise Server By default, the BlackBerry® Enterprise Server can process S/MIME-protected messages. You can turn off support for processing S/MIME-protected messages if the BlackBerry Enterprise Server experiences issues when it processes S/ MIME-protected messages or if your organization does not use S/MIME encryption. 1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view > Email. 2. Click the instance that you want to change. 3. On the Messaging tab, click Edit instance. 4. In the Security settings section, in the Turn on S/MIME message processing drop-down list, click False. 5. Click Save All. 56

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359
  • 360
  • 361
  • 362
  • 363
  • 364
  • 365
  • 366
  • 367
  • 368
  • 369
  • 370
  • 371
  • 372
  • 373
  • 374
  • 375
  • 376
  • 377
  • 378
  • 379
  • 380
  • 381
  • 382
  • 383
  • 384
  • 385
  • 386
  • 387
  • 388
  • 389
  • 390
  • 391
  • 392
  • 393
  • 394
  • 395
  • 396
  • 397
  • 398
  • 399
  • 400
  • 401
  • 402
  • 403
  • 404
  • 405
  • 406
  • 407
  • 408
  • 409
  • 410
  • 411
  • 412
  • 413
  • 414
  • 415
  • 416
  • 417
  • 418
  • 419
  • 420

3.
Click
Edit instance
.
4.
On the
Messaging
tab, in the
Security settings
section, perform any of the following actions:
To require that the BlackBerry Enterprise Server encrypts messages using S/MIME encryption for a second
time when the BlackBerry Enterprise Server processes S/MIME-protected messages that an S/MIME-enabled
application weakly encrypted or only signed, in the
Turn on S/MIME encryption on signed and weakly
encrypted messages
drop-down list, click
True
.
To permit BlackBerry device users that have email applications that do not support S/MIME to read the text
of an S/MIME-protected message, in the
Send S/MIME messages in clear-signed format
drop-down list, click
True
.
To require that the BlackBerry Enterprise Server deletes attachment data from any signed-only S/MIME-
protected messages so that the BlackBerry Enterprise Server conserves bandwidth, in the
Remove
attachment data from signed S/MIME messages
drop-down list, click
True
.
To require that the BlackBerry Enterprise Server sends encrypted S/MIME-protected messages using an
updated MIME content-type that is in accordance with PKCS#7 instead of the default legacy MIME content-
type, in the
Use PKCS #7 MIME type
drop-down list, click
True
.
5.
Click
Save all
.
6.
To make sure that the changes take effect immediately, perform the following actions to restart the BlackBerry
Messaging Agent:
a.
On the
Servers and components
menu, expand
BlackBerry Solution topology > BlackBerry Domain >
Component view > BlackBerry Enterprise Server
.
b.
Click the BlackBerry Enterprise Server instance that includes the BlackBerry Messaging Agent.
c.
Click
Restart instance
.
Related topics
Restarting BlackBerry Enterprise Server components, 327
Turn off support for processing S/MIME-protected messages on the BlackBerry
Enterprise Server
By default, the BlackBerry® Enterprise Server can process S/MIME-protected messages. You can turn off support for
processing S/MIME-protected messages if the BlackBerry Enterprise Server experiences issues when it processes S/
MIME-protected messages or if your organization does not use S/MIME encryption.
1.
In the BlackBerry Administration Service, on the
Servers and components
menu, expand
BlackBerry Solution
topology > BlackBerry Domain > Component view > Email
.
2.
Click the instance that you want to change.
3.
On the
Messaging
tab, click
Edit instance
.
4.
In the
Security settings
section, in the
Turn on S/MIME message processing
drop-down list, click
False
.
5.
Click
Save All
.
Administration Guide
Extending messaging security to a BlackBerry device
56